USER BEHAVIOR ANALYTICS
Focus, Analyze and Identify Anomalies
Behavior in a dashboard
Dashboard are user to diplay various aspects of the UBA application.
High-level widgets allows you to view behavior in different ways, including timeline and trend objects. Multi filter search permits you to focus the dashboard on your selections and highlight the meaningful information.
Real time anomalies are also reported in a human readable form, so you’ll discover that: “User Jhon is involved in a privilege escalation event. This is the first time we’ve seen Jhon in this situation. This normally does not happen at 3AM. This leads us to think that this is a serious anomaly”.
User related risk
User behavior is also associated to risk categories to define a priority bases on the meaning of a particular event, not only on its volume. A set of dedicated widgets show, together with trend indicators, the risk associated to users. events and hosts impacted by user’s activity.
No advanced configuration needed because the SGBox UBA automatically checks for all different situations. All the anomalies discovered became events that can be used in the correlation system. Events from UBA can start LCE rule and take reactions, by sending alarms or interacting with external tools by calling their API.
Try it Now!
If you’re interested in learning how SGBox User Behavior Analytics can help you
to discover anomalies in your network, request a trial version today.
We’d be proud to show you what we can do.